This vulnerability in SQLite affects versions before the Fossil check-in 869a51ae84df and involves the Session Extension's changeset concat/changegroup merge path. A local attacker can exploit this flaw to obtain sensitive information. The CVSS 3.1 vector indicates low attack complexity, no privileges required, but user interaction is necessary. The impact includes limited confidentiality loss and high impact on availability. The vulnerability is present in numerous Ubuntu-distributed SQLite package versions across many LTS releases.

The vulnerability allows a local attacker to gain access to sensitive information, which compromises confidentiality to a limited extent. The attack requires user interaction but no privileges, making it moderately accessible. Additionally, the vulnerability can cause a high impact on availability, potentially disrupting normal operations of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor Ubuntu security advisories for updates and apply patches once available. Until then, limiting local access and user interaction with vulnerable SQLite instances may reduce risk.